access_policy_rails 0.0.1 → 0.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 90e7d6b18bd059963e82d1cbc2486150a71a5a3c
-  data.tar.gz: 0a532c786ab1a225dab5ef6d8cb074083619aa5b
+  metadata.gz: 87547ac0de14fb1192be856e09b806c8e4ca0b99
+  data.tar.gz: dfb335dce94875c436775a02f90ec8fc15fd4c6d
 SHA512:
-  metadata.gz: b4bbbde1e2ef3549b244a87206d706dd0b87daa64aed228e709241bb7e086e262a73116f314620f4ea8fbdae4e5c7bc54b6def6ed579c11bab8c20c5abbef51b
-  data.tar.gz: a1ae44e5234d0ebeab0d19c99bd585cd7ba6b7e4e52415d9178f1a2f7d4458654f52e8e994c86e1defabcef14da9439e13d2545b80119e2588e14f9e156f5e82
+  metadata.gz: e5e671362763aa7ac22e8f282f2239cf95ce584b5cb0fdb8c3eb9811eac15059c2f610168cfb01e4e43869f6089e446bb6deb63498ae4b3ddbb7b0a29c6b9fd5
+  data.tar.gz: a1345b03dfb575e2fb48f11c7da48d513166d621ca262b296f841cd991a678b74352efe8999eea10d298a180fa20e1632839c056d6226804543d7311f4b9546a

data/README.md

@@ -1,6 +1,6 @@
 # AccessPolicyRails [![Code Climate](https://codeclimate.com/github/slowjack2k/access_policy_rails.png)](https://codeclimate.com/github/slowjack2k/access_policy_rails) [![Build Status](https://travis-ci.org/slowjack2k/access_policy_rails.png?branch=master)](https://travis-ci.org/slowjack2k/access_policy_rails) [![Coverage Status](https://coveralls.io/repos/slowjack2k/access_policy_rails/badge.png?branch=master)](https://coveralls.io/r/slowjack2k/access_policy_rails?branch=master) [![Gem Version](https://badge.fury.io/rb/access_policy_rails.png)](http://badge.fury.io/rb/access_policy_rails)
 
-Rails extension for AccessPolicy. Stores the policy_check_user (default current_user)
+Rails extension for [AccessPolicy](https://github.com/slowjack2k/access_policy). Stores the policy_check_user (default current_user)
 in a RequestLocalStorage. So it is not needed to pass the user around.
 
 Further more some macros are provided to query permissions and protect actions.
@@ -24,7 +24,7 @@ Or install it yourself as:
 ```ruby
 
   class DummyController < ActionController::Base
-    attr_accessor :current_user
+    # ... typical controller stuff
 
     # instead of
     #

data/lib/access_policy_rails/controller_extensions.rb

@@ -12,8 +12,10 @@ module AccessPolicyRails
        hide_action :policy_check_user
        hide_action :authorize
        hide_action :policy_for
+       hide_action :policy
 
        helper_method :policy_for
+       helper_method :policy
 
      end
 
@@ -26,8 +28,12 @@ module AccessPolicyRails
     end
 
     def policy_for(object_to_guard=self)
+      PolicyWrapper.new(policy(object_to_guard))
+    end
+
+    def policy(object_to_guard=self)
       _guard.send(:switched_user_or_role, policy_check_user) do
-        PolicyWrapper.new(_guard.policy_for(object_to_guard))
+         _guard.policy_for(object_to_guard)
       end
     end
 

data/lib/access_policy_rails/version.rb

@@ -1,3 +1,3 @@
 module AccessPolicyRails
-  VERSION = "0.0.1"
+  VERSION = "0.0.2"
 end

data/spec/acceptance/expose_as_helper_spec.rb

@@ -0,0 +1,42 @@
+require 'acceptance_spec_helper'
+
+feature 'Expose helper', %q{
+   In order to change views dependent on permissions
+   as a developer
+   I want to be able to query permissions in views
+}, type: :helper do
+
+  given(:service_object){
+    Class.new() do
+      include AccessPolicy
+
+      def self.policy_class
+        Struct.new(:current_user, :service_object) do
+          def create?
+            !!(current_user && current_user.create_allowed?)
+          end
+
+          def show?
+            !!(current_user && current_user.show_allowed?)
+          end
+        end
+      end
+
+    end.new
+  }
+
+  given(:a_user){
+    double('user', create_allowed?: false, show_allowed?: true)
+  }
+
+  scenario 'action is allowed' do
+    allow(controller).to receive(:current_user).and_return a_user
+    expect(helper.policy_for(service_object).allow?(:show)).to be_truthy
+  end
+
+  scenario 'action is forbidden' do
+    allow(controller).to receive(:current_user).and_return a_user
+    expect(helper.policy_for(service_object).allow?(:create)).to be_falsy
+  end
+
+end

data/spec/acceptance/support/feature.rb

@@ -20,7 +20,7 @@ end
 def self.feature(*args, &block)
   options = if args.last.is_a?(Hash) then args.pop else {} end
   options[:capybara_feature] = true
-  options[:type] = :feature
+  options[:type] ||= :feature
   options[:caller] ||= caller
   args.push(options)
 

data/spec/support/base_controller_dummy.rb

@@ -13,7 +13,7 @@ class BaseControllerDummy
   end
 
   def self.policy_class
-    Struct.new(:current_user, :controller) do
+    @policy_class ||= Struct.new(:current_user, :controller) do
       def create?
         current_user && current_user.create_allowed?
       end

data/spec/unit/lib/access_policy_rails/controller_extensions_spec.rb

@@ -85,5 +85,11 @@ module AccessPolicyRails
         expect(subject.new(user).policy_for).to be_kind_of PolicyWrapper
       end
     end
+
+    describe '#policy' do
+      it 'returns a policy' do
+        expect(subject.new(user).policy).to be_kind_of subject.policy_class
+      end
+    end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: access_policy_rails
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - Dieter Späth
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-02-12 00:00:00.000000000 Z
+date: 2014-02-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: access_policy
@@ -296,6 +296,7 @@ files:
 - spec/acceptance/dummy/public/favicon.ico
 - spec/acceptance/enables_permission_query_spec.rb
 - spec/acceptance/enforce_authorize_outside_of_action_spec.rb
+- spec/acceptance/expose_as_helper_spec.rb
 - spec/acceptance/protect_controller_actions_spec.rb
 - spec/acceptance/support/dummy_controller.rb
 - spec/acceptance/support/dummy_controller_policy.rb
@@ -373,6 +374,7 @@ test_files:
 - spec/acceptance/dummy/public/favicon.ico
 - spec/acceptance/enables_permission_query_spec.rb
 - spec/acceptance/enforce_authorize_outside_of_action_spec.rb
+- spec/acceptance/expose_as_helper_spec.rb
 - spec/acceptance/protect_controller_actions_spec.rb
 - spec/acceptance/support/dummy_controller.rb
 - spec/acceptance/support/dummy_controller_policy.rb